IR35: UK Off-Payroll Working Rules Explained

If you work with freelancers or “contractors” through their own limited companies, IR35 (the off‑payroll working rules) will be on your radar. Get it right, and you can confidently use flexible talent. Get it wrong, and you could face PAYE, NICs, interest and penalties landing on your business.

Don’t stress - with a clear process and the right contracts, you can manage IR35 risks without shutting the door on contractors. This guide explains IR35 in plain English and sets out a step‑by‑step approach for small business owners.

We’ll cover when IR35 applies, how to make and document status decisions, what to put in your contracts, and how to keep yourself protected from day one.

What Is IR35 And When Does It Apply To My Business?

IR35 is the common name for the UK’s off‑payroll working rules. In simple terms, it’s an anti‑avoidance regime that looks at whether a worker who invoices you via an intermediary (usually their own limited company, often called a PSC) would actually be your employee if the intermediary didn’t exist.

Key points for businesses:

• IR35 applies where you engage an individual via an intermediary (typically a PSC) and the individual personally provides services to you.
• For private sector engagements since April 2021, the responsibility to assess status and (if “inside IR35”) to account for PAYE and NICs usually sits with the client or the “fee‑payer” in the supply chain - unless you’re a small company.
• Small company exemption: If you qualify as “small” under the Companies Act 2006 (meeting two of the following: turnover ≤ £10.2m, balance sheet total ≤ £5.1m, ≤ 50 employees), the contractor’s PSC remains responsible for assessing IR35. If you’re not small, the off‑payroll rules in Chapter 10 ITEPA 2003 apply to you.
• Public sector bodies have been within the client‑assessment regime since 2017.

In short: if you’re medium or large, you must assess each contractor’s status and issue a Status Determination Statement (SDS). If “inside IR35”, the fee‑payer (often you, or your agency) must deduct income tax and employee NICs, pay employer NICs and the Apprenticeship Levy before paying the net amount to the PSC.

How Do I Assess IR35 Status Correctly (And Show “Reasonable Care”)?

Your legal duty is to take “reasonable care” when deciding if a contractor is “inside” or “outside” IR35. That means no blanket decisions and no copy‑and‑paste answers. You should assess each engagement on its own facts and document your reasoning.

Core Status Factors To Consider

HMRC, tribunals and guidance focus on the overall picture, but these factors are always central:

• Control: Who decides how, when and where the work is done? The more you direct day‑to‑day work, the more employment‑like it looks.
• Personal Service And Substitution: Is there a genuine right for the contractor to send a suitably qualified substitute that you must reasonably accept? A real, exercisable substitution right supports “outside IR35”.
• Mutuality Of Obligation (MOO): Are you obliged to provide continuous work and are they obliged to accept it? Open‑ended, continuous obligations point to employment.
• Financial Risk: Do they provide equipment, correct defects at their own cost, and bear a risk of loss or chance of profit? Genuine business risk supports contracting status.
• Integration (“Part And Parcel”): Are they embedded in your organisation (e.g. managerial responsibilities, internal HR processes, employee benefits), or are they clearly external service providers?

Other indicators include whether they can work for others at the same time, how they’re paid (day rate vs milestones/deliverables), who provides tools, and how the engagement ends.

Use Tools - But Don’t Rely On Them Blindly

HMRC’s CEST tool can be a helpful starting point, but it’s only as good as the inputs and isn’t determinative in every case. Reasonable care usually involves:

• Reviewing the actual working practices (not just the contract wording).
• Capturing evidence - e.g. who set hours, whether substitution was ever exercised, equipment use.
• Getting trained internal reviewers and, where needed, independent legal advice.
• Updating assessments if the working practices change.

If you’re weighing up the wider boundary between employment, worker and self‑employment, it can help to revisit the general employment status tests and the differences between worker vs employee in UK law.

What Is An SDS And What Are My Process Obligations?

A Status Determination Statement (SDS) is a written statement that sets out your IR35 conclusion for an engagement and explains the reasons. If you’re within scope of Chapter 10, you must:

• Issue an SDS to the contractor and, if there’s an agency in the chain, pass it to the next party.
• Take reasonable care in making the determination.
• Operate the “client‑led disagreement” process - if the contractor disputes your SDS, you must respond with reasons or a revised SDS within 45 days.

Good practice is to issue the SDS before work starts and to retain records of your assessment, supporting evidence and any challenge correspondence. The more robust your process, the lower your risk of tax exposure if HMRC reviews the engagement.

How Should My Contracts Reflect IR35 (Without Creating New Risks)?

Contracts matter - but they must reflect reality. Drafting a perfect paper substitution clause won’t help if, in practice, you require personal service and micromanage the work. Align the contract with actual working practices and keep them consistent.

Key contract points to consider in your Contractor Agreement or consultancy terms:

• Scope And Deliverables: Define services and deliverables clearly, with outcomes and milestones rather than inputs and hours.
• Substitution: Include a genuine, workable right of substitution with a practical process. If you can’t accept substitutes for regulatory or security reasons, put that in - but understand what that means for status.
• Control And Method: State that the contractor controls how the services are performed (subject to reasonable specifications and collaboration), and avoid employee‑style supervision, appraisal or disciplinary wording.
• Equipment And Place Of Work: Where feasible, specify that the contractor provides their own equipment and can deliver off‑site.
• Payment And Risk: Use project fees or milestone billing where practical and include obligations to remedy defects at their cost.
• IP Ownership: Make sure the agreement deals with copyright and inventions created by contractors so your business owns what it’s paying for. See our guide on intellectual property (independent contractors).
• Exclusivity And Non‑Compete: Avoid broad restraints that look like employee‑style control, and use proportionate, enforceable non‑compete clauses if truly necessary to protect legitimate interests.
• Notice And Termination: Set clear notice periods and termination triggers that suit a B2B relationship. If you’re unsure about timeframes, this overview of contractor notice periods is a useful reference.
• Indemnities And Tax Warranties: Consider carefully drafted provisions addressing tax status, cooperation with audits, and who bears liability if IR35 applies. These need to be balanced and commercially workable.
• Audit And Information Rights: Build in rights to request information about working practices relevant to status (e.g. substitution, concurrent clients) so you can evidence reasonable care.

If you’re designing a consultancy model from scratch, these consultant contracts must‑have clauses will help you tick off the essentials while supporting your IR35 position.

What Risks Do I Face If I Get IR35 Wrong?

Where IR35 is triggered and you’re the fee‑payer, you may need to deduct income tax and employee NICs and pay employer NICs and the Apprenticeship Levy. If HMRC later decides an engagement was inside IR35 and you didn’t operate PAYE, you could face:

• Back tax and NICs (plus employer NICs and Apprenticeship Levy).
• Interest and penalties, especially if you didn’t take reasonable care.
• Liability transfer within the supply chain in some cases (e.g. where parties fail to meet obligations or due diligence is lacking).
• Reputational damage and disruption to key projects if contractors disengage.

Misclassification carries wider legal risk, too. If working practices drift into employment territory, you may encounter claims around holiday pay, unfair dismissal, or other rights. Understanding the line between contractor vs subcontractor and your broader workforce mix is part of good risk management.

Step‑By‑Step: How To Build An IR35‑Safe Contractor Process

1) Map Your Contractor Population

Start with a simple register of current and planned contractor roles. Capture who they are, their PSC/agency, services, where they work, who manages them, equipment used, and whether substitution has ever been used. This helps you prioritise higher‑risk roles (long‑term engagements, on‑site roles under close supervision).

2) Draft Fit‑For‑Purpose Contracts

Update your standard Contractor Agreement so it supports “outside IR35” where appropriate (control, substitution, deliverables, business risk) and includes tax warranties and cooperation clauses. If a role is likely “inside IR35”, align the contract accordingly and plan for PAYE operation.

3) Assess Status For Each Engagement

Carry out a status assessment before the work starts. Use structured questionnaires and interviews to capture actual working practices (not just what the contract says). Document your reasoning and produce the SDS if you’re within scope of the off‑payroll rules.

4) Communicate And Keep Records

Send the SDS to the contractor and any agency in the chain. Explain how you reached the decision, and how to trigger the disagreement process. Keep internal records - assessment notes, emails, and any subsequent changes to the engagement.

5) Operate PAYE Where Required

If your SDS concludes “inside IR35”, ensure the fee‑payer runs PAYE, deducts tax and employee NICs, and pays employer NICs and the Apprenticeship Levy. Check your invoicing and accounting processes so VAT and PAYE are handled correctly and there’s no double‑deduction.

6) Monitor Working Practices

Projects evolve, and that can shift status. If a contractor initially worked off‑site with minimal supervision but is now on‑site with fixed hours and line‑managed tasks, reassess and, if necessary, issue an updated SDS.

7) Train Your Managers

Often, IR35 risk creeps in through well‑meaning managers treating contractors like employees day‑to‑day. Short training on “what we can/can’t ask contractors to do” and when to escalate changes will protect your status decisions.

Practical Scenarios: What Does “Inside” And “Outside” Look Like?

Outside IR35 - Project‑Based Tech Build

You engage a software engineer via a PSC to deliver a defined feature set over 12 weeks, paid per milestone. They work off‑site using their own equipment, choose their hours, can send a qualified substitute with short notice, and correct defects at their own cost. You provide a high‑level spec and feedback on deliverables, but not day‑to‑day direction.

Here, the overall picture supports “outside IR35”: control is low, substitution is genuine, financial risk exists, and the engagement is deliverable‑focused.

Inside IR35 - Embedded Long‑Term Role

You bring in a “contractor” on a rolling day‑rate to fill an internal BAU role indefinitely. They’re on your rota, use your kit, require permission for leave, and report to an internal manager who assigns tasks and sets working hours.

This looks and feels like employment. If you’re within Chapter 10 scope, expect an “inside IR35” SDS and operate PAYE via the fee‑payer.

Common Contract And Policy Mistakes That Create IR35 Risk

• Blanket “Outside” Declarations: One policy for all roles rarely matches reality. HMRC expects case‑by‑case assessment and will challenge blanket outcomes.
• Paper Substitution With No Practical Route: If the team lead says, “we’d never accept a substitute,” the clause won’t help.
• Employee‑Style Policies Applied To Contractors: Mandatory attendance at employee appraisals, disciplinary procedures, or staff benefits blurs the line.
• Paying Purely For Time: Day‑rates are common, but wherever possible, shift to deliverables and milestones to reflect a B2B relationship.
• IP Left Unassigned: Even if status is “outside IR35,” you still need a clear IP assignment so your business owns outputs - see the points on IP with contractors.

What If I Engage Contractors Via An Agency Or Overseas?

Supply chains complicate IR35. If there’s an agency between you and the contractor’s PSC, the “fee‑payer” duty (to run PAYE for inside IR35) usually sits with the party paying the PSC. However, the client still has the duty to take reasonable care, issue the SDS and operate the disagreement process. Make sure your contract flow‑down requires agencies to pass on the SDS and to cooperate on tax and audit matters.

For cross‑border engagements, status analysis still turns on UK working practices if the services are effectively performed for a UK client. You will also need to think about tax residency, permanent establishment and regulatory issues. Where you’re building a distributed model, revisit your process alongside your approach to engaging overseas contractors so the documents and controls fit how the work is done in practice.

How IR35 Interacts With Wider Employment And Contractor Law

IR35 is a tax regime, but it overlaps with employment status. A contractor can be “outside IR35” for tax purposes yet still claim worker rights in certain circumstances if the factual relationship points that way. Keep your overall model coherent - contracts, working practices and policies should all align with a genuine B2B relationship where that’s what you intend.

If a role evolves into a longer‑term, integrated position with set hours and line management, consider whether it’s time to hire on an Employment Contract and apply employment law protections consistently. That avoids the risk of piecemeal changes slowly undermining your status decisions.

Key Takeaways

• Determine whether the off‑payroll working rules apply to you. If you’re a medium or large private sector client, you must assess status and issue a reasoned SDS for each engagement.
• Take reasonable care: look at control, substitution, mutuality of obligation, financial risk and integration, and document both the contract and actual working practices.
• Put the right paperwork in place from day one - a tailored Contractor Agreement supporting your status position, IP ownership, proportionate restraints, tax warranties and cooperation clauses.
• Run a robust process: issue SDSs, operate the disagreement process within 45 days, and keep detailed records. Reassess if the working practices change.
• If an engagement is inside IR35, make sure the fee‑payer operates PAYE correctly and budgets for employer NICs and the Apprenticeship Levy.
• Avoid status drift - train managers and keep policies aligned to a true B2B relationship. Where roles become employee‑like, switch to an appropriate Employment Contract.
• For consultancy models and mixed workforces, review the differences between worker vs employee and build contracts using these must‑have clauses to stay protected.

If you’d like tailored IR35 advice, help drafting or updating your contractor documents, or a review of a tricky status scenario, our friendly team can help. You can reach us at 08081347754 or team@sprintlaw.co.uk for a free, no‑obligations chat.